LEAP authentication from iPhone 2.0

Question

Level 1

22 points

LEAP authentication from iPhone 2.0

If someone knows how to do this can you please post instructions. I could not figure out how; I was expecting to be able to do it in a fashion similar to how it's done under Leopard or even Tiger(the workaround).

thanks

G4, Mac OS X (10.4.10)

Posted on Jul 14, 2008 7:12 AM

Reply

Answer 1

naoc

Level 1

5 points

Jul 14, 2008 8:29 AM in response to zsurfsup

I guess it really all depends on how your trying to set this up. If you are trying to connect to a network that has LEAP or PEAP in use, my experience while beta testing the software is that it can not be done using the iPhone settings. I work for a medical center and am using the iPhone configuration utility to create profiles ( All the advanced settings seem to be in it as apposed to the iPhone). Under the Wi-Fi tab we use WEP Enterprise. Once I chose this it allows me to select the appropriate protocol LEAP/PEAP. I save it after configuring the exchange information, and then export it or email it to an account I can access with my iPhone. I open the email and there is my file. Open the file and install it. Viola!! there it is. I just did this about 5 min ago 🙂

The Enterprise Deployment Guide, and additional documentation
http://www.apple.com/support/iphone/enterprise/

iPhone Configuration Utility 1.0 for Mac OS X
http://www.apple.com/support/downloads/iphoneconfigurationutility10formacosx.htm l

Phone Configuration Web Utility 1.0 for Mac
http://www.apple.com/support/downloads/iphoneconfigurationwebutility10formac.htm l

iPhone Configuration Web Utility 1.0 for Windows
http://www.apple.com/support/downloads/iphoneconfigurationwebutility10forwindows .html

Message was edited by: naoc

Reply

Answer 2

zsurfsup Author

Level 1

22 points

Jul 14, 2008 9:18 AM in response to naoc

So what your telling me is I have to get my network admin folks to set this up for me?

Reply

Answer 3

Jul 14, 2008 10:39 AM in response to naoc

I have used the Web configuration utility for Windows and tried to get my iPod Touch to connect to our LEAP network, but it doesn't seem to help. Is there a way to select the encryption type? I have tried many combinations of LEAP + WEP Enterprise, WPA Enterprise and Any Enterprise, but I can not connect. Our network uses CKIP encryption (a standard choice on my laptop running Intel's Does anyone know if CKIP encryption is supported under any of these settings? I can't find any documentation about which encryption methods are supported.

Reply

Answer 4

Jul 14, 2008 12:52 PM in response to naoc

NAOC,
Hijack here:
I am basically doing the same thing you are, but having trouble. I noticed I couldn't export the profile unless I filled in all the 'requireds''. I didnt know what APN setttings under Advanced were supposed to be. I am basically interested in the WiFi settings at the moment. I was able to get a profile on the machine through the Config utility but I still get a timeout trying to connect to the SSID. The Radius server doesn't really show anything in the logs and the AP just lists the MAC address of the iPod Touch and that it is failing authenitcation.

I put some info here:
http://discussions.apple.com/thread.jspa?threadID=1606412&tstart=0
Maybe you can take a look.

thanks
S

Reply

Answer 5

naoc

Level 1

5 points

Jul 14, 2008 1:31 PM in response to zsurfsup

I would say yes.

Reply

Answer 6

naoc

Level 1

5 points

Jul 14, 2008 1:58 PM in response to BabyGiant

I don't think you should be messing with the APN settings: Here is the info the from setup guide about APN:

The Advanced pane lets you change the device’s Access Point Name (APN) settings.
The APN settings define how the device connects to the carrier’s network. Change
these settings only when specifically directed to do so by a carrier network expert. If
these settings are incorrect, the device can’t access data using the cellular network.

All the settings you need should be under wi-fi. We don't use a certificate here so I don't have to worry about that and we use a different type of encryption. Sorry I can't be of more help.

Reply

Answer 7

Jul 14, 2008 4:25 PM in response to naoc

Thanks for checking... pretty frustrating. I am suprised at the lack of options on the actual device (in regards to setting up Wifi sec, etc). It seems most has to be done through the Config App on a machine.

Not about to change the whole secured wireless network for a couple iphones... too bad, because Mac's connect with no problems...

Reply

Answer 8

infobhan

Level 1

19 points

Jul 16, 2008 1:43 PM in response to bryantthesmith

I was able to get on our LEAP network but selecting "other" and manually entering the SSID and choosing WPA enterprise, never even touching the config utility.

This has worked for several users here, but not for a couple, who get self-assigned IPs.

No rhyme or reason why it works for some and not others (works for some users with either model, and not for some users with either model).

Reply

Answer 9

Jul 23, 2008 1:51 PM in response to zsurfsup

I went thru the whole Web config process and was able to successfully install the profile containing LEAP (WEP Enterprise). I see the network but it won't connect.

Reply

Answer 10

infobhan

Level 1

19 points

Jul 24, 2008 6:09 AM in response to Frank Malloy

I assume you mean WPA Enterprise and not WEP Enterprise. A few of my coworkers were unable to connect: they would appear to connect, but the 3G icon at the top of the screen would remain and they would have a self-assigned IP. Interestingly, they figured out if they then shut off the phone and turned it back on, it would connect and now they have no problems.

Reply

Answer 11

Jul 24, 2008 7:05 AM in response to infobhan

No, I did mean WEP Enterprise. I checked my laptop's wireless config (works fine), which is configured for WEP Enterprise and LEAP.

I will try rebooting the phone.

Reply

Answer 12

infobhan

Level 1

19 points

Jul 25, 2008 5:29 AM in response to Frank Malloy

Interesting. May be worth trying WPA enterprise. That worked for me with LEAP. I checked with the users, this is what they did:
1) Reset network settings (Settings->General->Reset->Reset Network Settings
2) Go to WIFI, click other, manually enter SSID and choose WPA enterprise - login when prompted
3) If WiFi icon doesn't appear next to carrier name in the upper left after several seconds, push sleep button.
4) wake from sleep and try again, waiting a minute or so to see if it autoconnects.

Reply

Answer 13

zsurfsup Author

Level 1

22 points

Jul 25, 2008 6:20 AM in response to zsurfsup

Thanks everyone for contributing. What I have discovered is that the information from infobhan is what has worked for us. We too could get some iphones(2.0) connected to our network via LEAP using WPA Enterprise and some would not. So, after reading infobhan's last post we reset the network connections on all of our iphones tried WPA Enterprise again and everyone of them connected via LEAP.
We did not have to do anything on the Enterprise Server side, only the client side iPhone as shown by infobhan. Note the instructions say to use "WPA Enterprise" not WEP. WEP was the 'work-around' way to do LEAP authentication from OS X Tiger and I believe still works in Leopard (although LEAP is supported now). This is why, as Frank Malloy points out, he can LEAP from his laptop via WEP. We tried WEP to begin with on all of our iPhones assuming it would work like our laptops, it did not.

So Kudos to infobhan!

Thanks to everyone for posting.

(infobhan's instructions)
1) Reset network settings (Settings->General->Reset->Reset Network Settings)
2) Go to WIFI, click other, manually enter SSID and choose WPA enterprise - login when prompted
3) If WiFi icon doesn't appear next to carrier name in the upper left after several seconds, push sleep button.
4) wake from sleep and try again, waiting a minute or so to see if it autoconnects.

Reply

Answer 14

Jul 25, 2008 9:58 AM in response to zsurfsup

Thanks to infobhan and zsurfsup, but following the instructions still does not allow me to connect.

The laptop I am connecting with is a company-issued PC, so of course that works. I checked the config, and it is definitely WEP Enterprise and LEAP. I cannot try my Mac PowerBook as it is a TIBook running Tiger 10.4.11 (Leopard is not supported), and I don't think that supports LEAP...?

I am checking with others in my company, but my belief now is that every device on the wireless network needs to have their MAC address registered, and they restrict connection only to those on the MAC address list, so that may be why I cannot connect. That is a guess I am trying to confirm. I don't want to ask IT directly as they are very anti-Apple and iPhones are not supported.

Reply

Answer 15

zsurfsup Author

Level 1

22 points

Jul 25, 2008 10:30 AM in response to Frank Malloy

Frank,

I have the same exact setup. Our laptops connect via WEP Enterprise and LEAP. Our iPhones could not do that and the instructions to use WPA Enterprise worked for us. Our shop is not Apple friendly either and our iPhones are not corporate issued. They do not have our MAC addresses. So I don't think thats your problem either.
Some suggestions (which you've probably already tried):
- Ensure that your install of iPhone 2.0 worked successfully
- Make sure you reset the iPhone Network settings
- Make sure your SSID, username and password are all correct. (same as when logging in from laptop).
- Make sure you are logging on in a location where your iPhone can get a good signal. (Does your laptop have access from the same location? We had several guys that had to walk around the office until their iPhones connected.)

Thats pretty much for my ideas. We had several iphones all Edge originals, not 3G, connect via the instructions in this thread.

Message was edited by: zsurfsup

Reply